Merge branch '1579-keep-server-in-docker' of git.clinicalfuture.com:arvados into...

[arvados.git] / apps / workbench / app / controllers / application_controller.rb

diff --git a/apps/workbench/app/controllers/application_controller.rb b/apps/workbench/app/controllers/application_controller.rb
index 07b7a2a1df90cb8e550ce125c4cbd567d6c0848e..126dbbe14e38dad895e0cca308b9e57670d30ef0 100644 (file)
--- a/apps/workbench/app/controllers/application_controller.rb
+++ b/apps/workbench/app/controllers/application_controller.rb
@@ -1,9 +1,10 @@
 class ApplicationController < ActionController::Base
   protect_from_forgery
+  around_filter :thread_clear
   around_filter :thread_with_api_token, :except => [:render_exception, :render_not_found]
   before_filter :find_object_by_uuid, :except => [:index, :render_exception, :render_not_found]
 
-  unless Rails.application.config.consider_all_requests_local
+  begin
     rescue_from Exception,
     :with => :render_exception
     rescue_from ActiveRecord::RecordNotFound,
@@ -12,7 +13,7 @@ class ApplicationController < ActionController::Base
     :with => :render_not_found
     rescue_from ActionController::UnknownController,
     :with => :render_not_found
-    rescue_from ActionController::UnknownAction,
+    rescue_from ::AbstractController::ActionNotFound,
     :with => :render_not_found
   end
 
@@ -32,7 +33,7 @@ class ApplicationController < ActionController::Base
   def render_exception(e)
     logger.error e.inspect
     logger.error e.backtrace.collect { |x| x + "\n" }.join('') if e.backtrace
-    if @object and @object.errors and @object.errors.full_messages
+    if @object.andand.errors.andand.full_messages.andand.any?
       @errors = @object.errors.full_messages
     else
       @errors = [e.inspect]
@@ -51,6 +52,7 @@ class ApplicationController < ActionController::Base
     @objects ||= model_class.all
     respond_to do |f|
       f.json { render json: @objects }
+      f.html { render }
     end
   end
 
@@ -64,26 +66,74 @@ class ApplicationController < ActionController::Base
     end
   end
 
+  def render_content
+    if !@object
+      return render_not_found("object not found")
+    end
+  end
+
+  def new
+    @object = model_class.new
+  end
+
+  def update
+    updates = params[@object.class.to_s.underscore.singularize.to_sym]
+    updates.keys.each do |attr|
+      if @object.send(attr).is_a? Hash and updates[attr].is_a? String
+        updates[attr] = Oj.load updates[attr]
+      end
+    end
+    if @object.update_attributes updates
+      show
+    else
+      self.render_error status: 422
+    end
+  end
+
+  def create
+    @object ||= model_class.new params[model_class.to_s.singularize.to_sym]
+    @object.save!
+    redirect_to @object
+  end
+
+  def destroy
+    if @object.destroy
+      redirect_to(params[:return_to] || :back)
+    else
+      self.render_error status: 422
+    end
+  end
+
   def current_user
     if Thread.current[:arvados_api_token]
-      @current_user ||= User.current
+      Thread.current[:user] ||= User.current
     else
       logger.error "No API token in Thread"
       return nil
     end
   end
 
-  protected
-    
   def model_class
     controller_name.classify.constantize
   end
 
+  protected
+    
   def find_object_by_uuid
     if params[:id] and params[:id].match /\D/
       params[:uuid] = params.delete :id
     end
-    @object = model_class.where(uuid: params[:uuid]).first
+    if params[:uuid].is_a? String
+      @object = model_class.find(params[:uuid])
+    else
+      @object = model_class.where(uuid: params[:uuid]).first
+    end
+  end
+
+  def thread_clear
+    Thread.current[:arvados_api_token] = nil
+    Thread.current[:user] = nil
+    yield
   end
 
   def thread_with_api_token
@@ -120,14 +170,21 @@ class ApplicationController < ActionController::Base
         rescue ArvadosApiClient::NotLoggedInException
           try_redirect_to_login = true
         end
+      else
+        logger.debug "No token received, session is #{session.inspect}"
       end
       if try_redirect_to_login
         respond_to do |f|
           f.html {
-            redirect_to $arvados_api_client.arvados_login_url(return_to: request.url)
+            if request.method == 'GET'
+              redirect_to $arvados_api_client.arvados_login_url(return_to: request.url)
+            else
+              flash[:error] = "Either you are not logged in, or your session has timed out. I can't automatically log you in and re-attempt this request."
+              redirect_to :back
+            end
           }
           f.json {
-            @errors = ['No API token supplied -- can\'t really do anything.']
+            @errors = ['You do not seem to be logged in. You did not supply an API token with this request, and your session (if any) has timed out.']
             self.render_error status: 422
           }
         end